Which versions of Tenda are affected by CVE-2026-4535?

A critical vulnerability in Tenda FH451 routers allows authenticated attackers to execute arbitrary code, with a public exploit already available.

Is there a public PoC exploit available for CVE-2026-4535?

Yes, a public proof-of-concept exploit is available for CVE-2026-4535. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-4535?

Within 24 hours: Identify and inventory all Tenda FH451 devices in production and assess network criticality. Within 7 days: Implement network segmentation to isolate affected devices, restrict administrative access to trusted networks only, and monitor for exploitation attempts. Within 30 days: Evaluate replacement with patched firmware versions or alternative vendor solutions; request ETA from Tenda for security patches.

Tenda CVE-2026-4535

Q: What is the CVSS score of CVE-2026-4535?

CVE-2026-4535 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-14279 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-03-22 VulDB

GHSA-cqhc-m7m4-j634

Stack Overflow Tenda Buffer Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 03, 2026 - 17:22 vuln.today

Public exploit code

EUVD ID Assigned

Mar 22, 2026 - 04:30 euvd

EUVD-2026-14279

Analysis Generated

Mar 22, 2026 - 04:30 vuln.today

CVE Published

Mar 22, 2026 - 03:32 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability has been found in Tenda FH451 1.0.0.9. This vulnerability affects the function WrlclientSet of the file /goform/WrlclientSet. Such manipulation of the argument GO leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda FH451 1.0.0.9 allows authenticated remote attackers to achieve complete system compromise through crafted input to the WrlclientSet endpoint. Public exploit code exists for this vulnerability, and no patch is currently available. The flaw enables attackers with valid credentials to execute arbitrary code with full system privileges.

Technical ContextAI

This vulnerability affects Tenda FH451 wireless routers (CPE: cpe:2.3:a:tenda:fh451:*:*:*:*:*:*:*:*) running firmware version 1.0.0.9. The flaw is classified as CWE-121 (stack-based buffer overflow), occurring when the WrlclientSet function in the /goform/WrlclientSet file fails to properly validate the length of the 'GO' parameter before copying it to a fixed-size stack buffer. This is a classic memory corruption issue common in embedded device firmware written in C/C++ without adequate bounds checking. Stack-based buffer overflows allow attackers to overwrite return addresses and other critical stack data, leading to control flow hijacking and arbitrary code execution in the context of the web server process, typically running with elevated privileges on embedded routers.

RemediationAI

As of this analysis, no patch or firmware update from Tenda has been identified in the available references, with the remediation level listed as unspecified (RL:X) in the CVSS temporal vector. Organizations using Tenda FH451 routers should immediately check the vendor website (https://www.tenda.com.cn/) for firmware updates beyond version 1.0.0.9 and apply them if available. Until a patch is deployed, implement compensating controls including: restricting administrative access to the router's web interface to trusted IP addresses only, using strong non-default administrative credentials, disabling remote management features if not required, and placing affected devices behind additional network segmentation to limit exposure. Consider replacing the device with an alternative router if Tenda does not release a security update in a timely manner, as legacy embedded devices often do not receive ongoing security support.